EMC NetWorker

Paul Howarth paul at city-fan.org
Mon Apr 12 08:06:14 UTC 2010


EMC NetWorker is a proprietary enterprise backup solution, and one of 
the first steps in its install guide is to disable SELinux. No thanks. 
Adding the following file contexts to local policy gets it running just 
fine with SELinux enforcing:

/nsr(/.*)?						gen_context(system_u:object_r:var_t,s0)
/nsr/logs(/.*)?						gen_context(system_u:object_r:var_log_t,s0)
/usr/lib/nsr/(.*/)?.*\.so			 
gen_context(system_u:object_r:textrel_shlib_t,s0)
/opt/lgtonmc/bin/.*\.so(\.[0-9])?		 
gen_context(system_u:object_r:textrel_shlib_t,s0)

Note: the /usr/lib/nsr/ context is the right one even on x86_64 systems.

Paul.


More information about the selinux mailing list